NVD

Id
54794  
Name
CVE-2007-2630  
Description
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka 12All) 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and .php5 files via unspecified vectors. NOTE: this issue is reachable through filemanager/browser/default/browser.html.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-11  
Modified Date
2008-11-15  
Seq
2007-2630  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278128 54794 CVE-2007-2630 http://www.activecampaign.com/support/forum/showthread.php?t=3293  View
278129 54794 CVE-2007-2630 20070502 12All File Upload Vulnerability  View
278130 54794 CVE-2007-2630 20070507 Re: 12All File Upload Vulnerability  View
278131 54794 CVE-2007-2630 23792  View
278132 54794 CVE-2007-2630 12all-fckeditor-file-upload(34049)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53317 JVNDB-2007-002009 FCKeditor モジュールの filemanager/browser/default/connectors/php/config.php における .php4 および .php5 をアップロードされる脆弱性 ActiveCampaign および他の製品で使用される FCKeditor モジュールの filemanager/browser/default/connectors/php/config.php には、.php4 および .php5 をアップロードされる、および実行される脆弱性が存在します。 CVE-2007-2630 25985 CVE-2007-2630 54794 6.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002009.html 2007-05-02 2012-06-26 View